Missing Records in Sys Audit table
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-16-2019 04:45 PM
I've been looking into the Sys Audit table looking at changes to the Operating System field changes on the Computer table but I've noticed that there seems to be missing Sys Audit records. Some records are missing their Sys Audit record for changes on the OS field but when view the history for that record I can see changes on that field.
When I run a gilderecord query on that table I can see the missing record but they don't show up on the List View. Does SNOW deletes or archives old sys audit fields by default when they get too old? Just trying to get my head around what is happening here.
- Labels:
-
Best Practices
-
Instance Configuration

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-16-2019 05:41 PM
sys_audit records only get generated when you need them.
Until you request the audit history via "History > Calendar" or "List" the data doesn't exist in the sys_audit table.
sys_audit isn't really designed for the purpose of reporting.
There is API to generate the audit details, but I can't remember it (it's not documented).
Does this answer your question?
ServiceNow Nerd
ServiceNow Developer MVP 2020-2022
ServiceNow Community MVP 2019-2022
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-29-2021 12:40 PM
I would like to know more about the undocumented API though.